Senior Manager, Cyber Security and IT Risk

Requisition ID: 270013

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Senior Manager, Cyber Security & IT Risk is a key execution and risk management partner within the Cyber & IT Risk team. The role drives critical regulatory, audit, remediation and risk management priorities, helping ensure commitments are well managed, deliverables are high quality and work is completed on time.

The role requires strong Cyber and IT Risk knowledge combined with exceptional organization, judgment and execution. The Senior Manager will work across Cyber & IT Risk and with partners across the Bank to prepare regulatory and audit materials, manage issues and commitments, provide credible second-line review and challenge, and drive priority initiatives through to completion.

The successful candidate will be a proactive self-starter who can operate with a high degree of independence, bring structure to complex or ambiguous work, anticipate what is needed and identify issues before they become
delivery risks.

Is this role right for you? In this role, you will:

Regulatory & Audit Readiness

• Coordinate and prepare Cyber & IT Risk responses, briefing materials, evidence and other deliverables for regulatory examinations and engagements.
• Work with subject matter experts and stakeholders to ensure regulatory materials are clear, accurate, complete, internally consistent and supported by appropriate evidence.
• Support Cyber & IT Risk engagement with Internal Audit, including responses to observations and management actions.
• Review regulatory and audit materials through a second-line risk lens and identify gaps, inconsistencies or areas requiring further analysis or challenge.
• Anticipate upcoming requirements and ensure Cyber & IT Risk is well prepared for regulatory and audit engagements.

Issues, Remediation & Commitments

• Drive disciplined management of Cyber & IT Risk-owned audit issues, regulatory commitments, remediation activities and other priority actions.
• Maintain clear visibility of milestones, owners, dependencies, evidence requirements and target dates.
• Proactively follow up on actions and identify potential delivery, quality or dependency risks before commitments are at risk.
• Review remediation plans and closure evidence to assess whether actions address the underlying risk and support the intended outcome.
• Provide clear reporting and timely escalation of issues requiring management attention or intervention.

Second-Line Risk Oversight & Challenge

• Provide credible second-line review and challenge across Cyber and Technology Risk matters, including regulatory responses, audit observations, remediation plans, risk assessments, policies and standards, and issue closure.
• Apply sound risk judgment to identify gaps, assumptions and areas requiring further analysis or challenge.
• Develop clear risk perspectives and recommendations to support senior management decision-making.
• Work constructively with first-line partners and subject matter experts to drive practical, risk-informed outcomes.
• Identify themes across issues, audit findings, regulatory matters and other risk information that may indicate broader or emerging concerns.

Strategic Execution

• Take ownership of complex or ambiguous assignments, establish a clear path forward and drive work through to completion with minimal direction.
• Anticipate upcoming priorities, deadlines, dependencies and decision points and proactively address them.
• Coordinate across teams to obtain required input, resolve dependencies and maintain momentum.
• Prepare clear, concise and executive-ready briefings, presentations, risk perspectives and decision materials.
• Identify opportunities to strengthen Cyber & IT Risk governance, reporting and ways of working.

Do you have the skills that will enable you to succeed? We’d love to work with you if you have:

• 7+ years of relevant experience in Cyber Security, Technology Risk, IT Risk, audit, regulatory or related disciplines, or equivalent demonstrated expertise.
• Broad or deep knowledge across key Cyber and Technology Risk domains, with the ability to understand technical issues, assess risk implications and engage effectively with subject matter experts.
• Experience supporting regulatory examinations, Internal Audit engagements, issue remediation or significant risk-management commitments.
• Demonstrated ability to develop high-quality materials for senior executives, regulators, auditors or governance forums.
• Strong understanding of first-line management, second-line risk oversight and Internal Audit responsibilities.
• Experience within a large, complex, regulated financial institution is preferred.
• Relevant professional qualifications such as CISSP, CISM, CRISC or CISA are considered an asset.
• Exceptional organization, attention to detail and follow-through.
• Strong bias toward action and demonstrated ability to work independently.
• Ability to bring structure to ambiguous or complex assignments.
• Ability to manage multiple priorities and deadlines without losing sight of quality.
• Strong analytical thinking, risk judgment and constructive challenge.
• Excellent written and verbal communication.
• Ability to simplify complex Cyber and IT matters for executives, regulators and non-technical audiences.
• Strong stakeholder management and ability to drive action without direct authority.
• Ability to anticipate requirements, identify potential problems and escalate appropriately.

What’s in it for you?

• An inclusive & collaborative working environment that encourages creativity, curiosity, and celebrates success!
• We offer a competitive rewards package: Performance bonus, Employee Share Ownership Program, and Pension Plan Matching, Health Benefits from day one!
• Your career matters! You will have access to career development and progression opportunities.

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.